Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-7870

33
FAUCET Score

CVE-2017-7870 is a critical heap-based buffer overflow vulnerability in LibreOffice versions prior to 2017-01-02, specifically within the tools::Polygon::Insert function. With a CVSS score of 9.8, it allows for unauthenticated remote attackers to achieve high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness.

Impacted Technologies

VendorProductVersion(s)CPE
<= 5.3.0.0CPE matchmatch criteria
cpe:2.3:a:libreoffice:libreoffice:*:beta2:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
3.86%
Probability of exploitation in next 30 days
EPSS Percentile
89.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0386 is in the 82nd percentile among its peer group of 36,829 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

asteriskpatch availablevia llm_extracted
Fixed in: 5.2.5/5.3.0
View patch
check_pointpatch availablevia llm_extracted
Fixed in: 5.2.5/5.3.0
View patch
github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libreoffice-1:5.0.6.2-14.el7
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: libreoffice

Vendor Advisories (3)

redhatCVE-2017-7870Moderate

libreoffice: Heap-buffer-overflow in tools::Polygon::Insert

Jan 10, 2017
asteriskllm-asterisk-6b515d5db39a614e

Heap-buffer-overflow in WMF filter

check_pointllm-check_point-02a2106c9c3a7af6

Heap-buffer-overflow in WMF filter

References

access.redhat.com / errata/RHSA-2017:1975
bugs.chromium.org / p/oss-fuzz/issues/detail
Third Party AdvisoryVDB Entry
github.com / LibreOffice/core/commit/62a97e6a561ce65e88d4c537a1b82c336f012722
PatchThird Party Advisory
security.gentoo.org / glsa/201706-28
debian.org / security/2017/dsa-3837
libreoffice.org / about-us/security/advisories/cve-2017-7870
securityfocus.com / bid/97671
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039029